WMI Persistence - Script Event Consumer File Write — Detection Rule

Detects file writes of WMI script event consumer

Read the full analysis on IntelFusions